cloudflare/cfrpki

[question]: ignore filters and whitelisting

nskalis opened this issue · 3 comments

nskalis commented

Hi,

Is there a possibility to customise/override specific ROAs with mechanisms such as:

  • Ignore filters
    You can use filters to exclude ROAs matching an ASN and/or prefix

  • Whitelist
    By adding a whitelist entry you can manually authorise an ASN to originate a prefix in addition to the validated ROAs from the repository.

?

lspgn commented

Hi @nskalis,
Unfortunately this is not possible at the moment.
I am thinking of integrating this in GoRTR as it works on the JSON provided rather than OctoRPKI which translates directly the certificates data into a JSON.

Usually overrides can be customized in the router configuration.
Another solution could be a script fetching the JSON produced and filtering it before passing it to GoRTR.

Let me know if that answers your question.

nskalis commented

thank you, yes, it does.